Who Can Find My Devices? Security and Privacy of Apple's Crowd-Sourced Bluetooth Location Tracking System

Overnight, Apple has turned its hundreds-of-million-device ecosystem into the world's largest crowd-sourced location tracking network called offline finding (OF). OF leverages online finder devices to detect the presence of missing offline devices using Bluetooth and report an approximate location back to the owner via the Internet. While OF is not the first system of its kind, it is the first to commit to strong privacy goals. In particular, OF aims to ensure finder anonymity, untrackability of owner devices, and confidentiality of location reports. This paper presents the first comprehensive security and privacy analysis of OF. To this end, we recover the specifications of the closed-source OF protocols by means of reverse engineering. We experimentally show that unauthorized access to the location reports allows for accurate device tracking and retrieving a user's top locations with an error in the order of 10 meters in urban areas. While we find that OF's design achieves its privacy goals, we discover two distinct design and implementation flaws that can lead to a location correlation attack and unauthorized access to the location history of the past seven days, which could deanonymize users. Apple has partially addressed the issues following our responsible disclosure. Finally, we make our research artifacts publicly available.Comment: Accepted at Privacy Enhancing Technologies Symposium (PETS) 202

Who Can Find My Devices? Security and Privacy of Apple’s Crowd-Sourced Bluetooth Location Tracking System

Overnight, Apple has turned its hundreds-of-million-device ecosystem into the world’s largest crowd-sourced location tracking network called o~ine finding (OF). OF leverages online finder devices to detect the presence of missing o~ine devices using Bluetooth and report an approximate location back to the owner via the Internet. While OF is not the first system of its kind, it is the first to commit to strong privacy goals. In particular, OF aims to ensure finder anonymity, prevent tracking of owner devices, and confidentiality of location reports. This paper presents the first comprehensive security and privacy analysis of OF. To this end, we recover the specifications of the closed-source OF protocols by means of reverse engineering. We experimentally show that unauthorized access to the location reports allows for accurate device tracking and retrieving a user’s top locations with an error in the order of 10 meters in urban areas. While we find that OF’s design achieves its privacy goals, we discover two distinct design and implementation flaws that can lead to a location correlation attack and unauthorized access to the location history of the past seven days, which could deanonymize users. Apple has partially addressed the issues following our responsible disclosure. Finally, we make our research artifacts publicly available

SUCLG2 identified as both a determinator of CSF Aβ1-42 levels and an attenuator of cognitive decline in Alzheimer's disease

Cerebrospinal fluid amyloid-beta 1-42 (Aβ1-42) and phosphorylated Tau at position 181 (pTau181) are biomarkers of Alzheimer's disease (AD). We performed an analysis and meta-analysis of genome-wide association study data on Aβ1-42 and pTau181 in AD dementia patients followed by independent replication. An association was found between Aβ1-42 level and a single-nucleotide polymorphism in SUCLG2 (rs62256378) (P = 2.5×10−12). An interaction between APOE genotype and rs62256378 was detected (P = 9.5 × 10−5), with the strongest effect being observed in APOE-ε4 noncarriers. Clinically, rs62256378 was associated with rate of cognitive decline in AD dementia patients (P = 3.1 × 10−3). Functional microglia experiments showed that SUCLG2 was involved in clearance of Aβ1-4

Convergent genetic and expression data implicate immunity in Alzheimer's disease

Background Late–onset Alzheimer's disease (AD) is heritable with 20 genes showing genome wide association in the International Genomics of Alzheimer's Project (IGAP). To identify the biology underlying the disease we extended these genetic data in a pathway analysis. Methods The ALIGATOR and GSEA algorithms were used in the IGAP data to identify associated functional pathways and correlated gene expression networks in human brain. Results ALIGATOR identified an excess of curated biological pathways showing enrichment of association. Enriched areas of biology included the immune response (p = 3.27×10-12 after multiple testing correction for pathways), regulation of endocytosis (p = 1.31×10-11), cholesterol transport (p = 2.96 × 10-9) and proteasome-ubiquitin activity (p = 1.34×10-6). Correlated gene expression analysis identified four significant network modules, all related to the immune response (corrected p 0.002 – 0.05). Conclusions The immune response, regulation of endocytosis, cholesterol transport and protein ubiquitination represent prime targets for AD therapeutics

Multiancestry analysis of the HLA locus in Alzheimer’s and Parkinson’s diseases uncovers a shared adaptive immune response mediated by HLA-DRB1*04 subtypes

Across multiancestry groups, we analyzed Human Leukocyte Antigen (HLA) associations in over 176,000 individuals with Parkinson’s disease (PD) and Alzheimer’s disease (AD) versus controls. We demonstrate that the two diseases share the same protective association at the HLA locus. HLA-specific fine-mapping showed that hierarchical protective effects of HLA-DRB1*04 subtypes best accounted for the association, strongest with HLA-DRB1*04:04 and HLA-DRB1*04:07, and intermediary with HLA-DRB1*04:01 and HLA-DRB1*04:03. The same signal was associated with decreased neurofibrillary tangles in postmortem brains and was associated with reduced tau levels in cerebrospinal fluid and to a lower extent with increased Aβ42. Protective HLA-DRB1*04 subtypes strongly bound the aggregation-prone tau PHF6 sequence, however only when acetylated at a lysine (K311), a common posttranslational modification central to tau aggregation. An HLA-DRB1*04-mediated adaptive immune response decreases PD and AD risks, potentially by acting against tau, offering the possibility of therapeutic avenues

Zeitenwende für Europas Sicherheitsordnung: Entwicklungsoptionen in drei Skizzen

Der von Russland im Februar begonnene Angriffskrieg auf die Ukraine hat die bisherige europäische Sicherheitsordnung zerstört. Bereits jetzt muss die von der Bundesregierung proklamierte Zeitenwende in der deutschen Außen- und Sicherheitspolitik eine neue Ordnung ins Auge fassen und gestalten, um erfolgreich zu sein. Schlüsselfaktoren sind die Einigkeit Europas in strategischen Politikfeldern sowie Russlands Positionierung gegenüber dem Rest Europas. Die drei Zukunftsoptionen - Konfrontation, Koexistenz oder Kooperation - identifizieren die Grundlagen für ein starkes Europa

Alzheimer's disease risk variants modulate endophenotypes in mild cognitive impairment

Introduction: We evaluated the effect of Alzheimer's disease (AD) susceptibility loci on endophenotypes closely related with AD pathology in patients with mild cognitive impairment (MCI). Methods: We selected 1730 MCI patients from four independent data sets. Weighted polygenic risk scores (PGS) were constructed of 18 non-apolipoprotein E (APOE) AD risk variants. In addition, we determined APOE genotype. AD endophenotypes were cognitive decline over time and cerebrospinal fluid (CSF) biomarkers (a beta, tau, ptau). Results: PGS was modestly associated with cognitive decline over time, as measured by mini-mental state examination (MMSE) (beta +/- SE: 0.24 +/- 0.10; P = .012), and with CSF levels of tau and ptau (tau: 1.38 +/- 0.36, P = 1.21 x 10(-4); ptau: 1.40 +/- 0.36, P = 1.02 x 10(-4)). Discussion: In MCI, we observed a joint effect of AD susceptibility loci on nonamyloid endophenotypes, suggesting a link of these genetic loci with neuronal degeneration in general rather than with Alzheimer-related amyloid deposition. (C) 2016 The Alzheimer's Association. Published by Elsevier Inc. All rights reserved